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Abstract 

Generalizing standard monadic second-order logic for Kripke models, 
we introduce monadic second-order logic MSOj interpreted over coalgebras 
for an arbitrary set functor T. Similar to well-known results for monadic 
second-order logic over trees, we provide a translation of this logic into 
a class of automata, relative to the class of T-coalgebras that admit a 
tree-like supporting Kripke frame. We then consider invariance under be¬ 
havioral equivalence of MSOj-formulas; more in particular, we investigate 
whether the coalgebraic /r-calculus is the bisimulation-invariant fragment 
of MSOj. Building on recent results by the third author we show that in or¬ 
der to provide such a coalgebraic generalization of the Janin-Walukiewicz 
Theorem, it suffices to find what we call an adequate uniform construe- 
tion for the functor T. As applications of this result we obtain a partly 
new proof of the Janin-Walukiewicz Theorem, and bisimulation invari¬ 
ance results for the bag functor (graded modal logic) and all exponential 
polynomial functors. 

Finally, we consider in some detail the monotone neighborhood functor 
Af, which provides coalgebraic semantics for monotone modal logic. It 
turns out that there is no adequate uniform construction for A4, whence 
the automata-theoretic approach towards bisimulation invariance does not 
apply directly. This problem can be overcome if we consider global bisim¬ 
ulations between neighborhood models: one of our main technical results 
provides a characterization of the monotone modal /r-calculus extended 
with the global modalities, as the fragment of monadic second-order logic 
for the monotone neighborhood functor that is invariant for global bisim¬ 
ulations. 
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1 Introduction 


1.1 Logic, automata and coalgebra 

The aim of this paper is to strengthen the link between the areas of logic, 
automata and coalgebra. More in particular, we provide a coalgebraic general¬ 
ization of the automata-theoretic approach towards monadic second-order logic 
(MSO), and we address the question whether the Janin-Walukiewicz Theorem 
can be generalized from Kripke structures to the setting of arbitrary coalgebras. 

The connection between monadic second-order logic and automata is clas¬ 
sic, going back to the seminal work of Biichi, Rabin, and others. For in¬ 
stance, Rabin’s decidability result for the monadic second-order theory of bi¬ 
nary trees, or S2S, makes use of a translation of monadic second-order logic 
into a class of automata, thus reducing the satisfiability problem for S2S to the 
non-emptiness problem for the corresponding automata |12) . The link between 
MSO and automata over trees with arbitrary branching was further explored by 
Walukiewicz [18) . Janin and Walukiewicz considered monadic second-order logic 
interpreted over Kripke structures, and used automata-theoretic techniques to 
obtain a van Benthem-like characterization theorem for monadic second-order 
logic, identifying the modal /x-calculus as the bisimulation invariant fragment of 
MSO [6]. Given the fact that in many applications bisimilar models are consid¬ 
ered to represent the same process, one has little interest in properties of models 
that are not bisimulation invariant. Thus the Janin-Walukiewicz Theorem can 
be seen as an expressive completeness result, stating that all relevant properties 
in monadic second-order logic can be expressed in the modal /r-calculus. 

Coalgebra enters naturally into this picture. Recall that Universal Coalge¬ 
bra m provides the notion of a coalgebra as the natural mathematical general¬ 
ization of state-based evolving systems such as streams, (infinite) trees, Kripke 
models, (probabilistic) transition systems, and many others. This approach 
combines simplicity with generality and wide applicability: many features, in¬ 
cluding input, output, nondeterminism, probability, and interaction, can easily 
be encoded in the coalgebra type T (formally an endofunctor on the category 
Set of sets as objects with functions as arrows). Starting with Moss’ seminal 
paper [5], coalgebraic logics have been developed for the purpose of specifying 
and reasoning about behavior, one of the most fundamental concepts that allows 
for a natural coalgebraic formalization. And with Kripke structures constituting 
key examples of coalgebras, it should come as no surprise that most coalgebraic 
logics are some kind of modification or generalization of modal logic [5] . 

The coalgebraic modal logics that we consider here originate with Pattin- 
son m-, they are characterized by a completely standard syntax, in which the 
semantics of each modality is determined by a so-called predicate lifting (see Def¬ 
inition [2] below). Many well-known variations of modal logic in fact arise as the 
coalgebraic logic MLa associated with a set A of such predicate liftings; examples 
include both standard and (monotone) neighborhood modal logic, graded and 
probabilistic modal logic, coalition logic, and conditional logic. Extensions of 
coalgebraic modal logics with fixpoint operators, needed for describing ongoing 
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behavior, were developed in mm- 

The link between coalgebra and automata theory is by now well-established. 
For instance, finite state automata operating on finite words have been recog¬ 
nized as key examples of coalgebra from the outset [T3]. More relevant for the 
purpose of this paper is the link with precisely the kind of automata mentioned 
earlier, since the (potentially infinite) objects on which these devices operate, 
such as streams, trees and Kripke frames, usually are coalgebras. Thus, the 
automata-theoretic perspective on modal fixpoint logic could be lifted to the 
abstraction level of coalgebra [13 [g. In fact, many key results in the theory 
of automata operating on infinite objects, such as Muller & Schupp’s Simula¬ 
tion Theorem nni can in fact be seen as instances of more general theorems in 
Universal Coalgebra [7]. 

1.2 Coalgebraic monadic second-order logic 

Missing from this picture is, to start with, a coalgebraic version of (monadic) 
second-order logic. Filling this gap is the first aim of the current paper, which 
introduces a notion of monadic second-order logic MSOj for coalgebras of type 
T. Our formalism combines two ideas from the literature. First of all, we 
looked for inspiration to the coalgebraic versions of first-order logic of Litak 
& alii ig. These authors introduced Coalgebraic Predicate Logic as a com¬ 
mon generalisation of first-order logic and coalgebraic modal logic, combining 
first-order quantification with coalgebraic syntax based on predicate liftings. 
Our formalism MSOt will combine a similar syntactic feature with second-order 
quantification. Second, following the tradition in automata-theoretic approaches 
towards monadic second-order logic, our formalism will be one-sorted. That is, 
we only allow second-order quantification in our language, relying on the fact 
that individual quantification, when called for, can be encoded as second-order 
quantification relativized to singleton sets. Since predicate liftings are defined as 
families of maps on powerset algebras, these two ideas fit together very well, to 
the effect that our second-order logic is in some sense simpler than the first-order 
formalism of |S]. 

In section [3 we will define, for any set A of monoton^il predicate liftings, 
a formalism MSOa, and we let MSOy denote the logic obtained by taking for A 
the set of all monotone predicate liftings. Clearly we will make sure that this 
definition generalizes the standard case, in the sense that the standard version 
of MSO for Kripke structures instantiates the logic MSO^q} and is equivalent to 
the coalgebraic logic MSOp (where V denotes the power set functor). 

The introduction of a monadic second-order logic MSDj for T-coalgebras nat¬ 
urally raises the question, for which T the coalgebraic modal ^-calculus for T 
corresponds to the bisimulation-invariant fragment of MSOy. 

Question 1. Which functors T satisfy /iMLj = MSOj/—? 

^In the most general case, restricting to monotone predicate liftings is not needed, one could 
define MSOj as the logic obtained by taking for A the set of all predicate liftings. However, 
in the context of this paper, where we take an automata-theoretic perspective on MSO, this 
restriction makes sense. 
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1.3 Automata for coalgebraic monadic second-order logic 

In order to address Question [TJ we take an automata-theoretic perspective on 
the logics MSOj and /rMLj, and as the second contribution of this paper we 
introduce a class of parity automata for MSOj. 

As usual, the operational semantics of our automata is given in terms of a 
two-player acceptance game, which proceeds in rounds moving from one basic 
position to another, where a basic position is a pair consisting of a state of 
the automaton and a point in the coalgebra structure under consideration. In 
each round, the two players, 3 and V, focus on a certain local ‘window’ on the 
coalgebra structure. This ‘window’ takes the shape of a one-step T -model, that 
is, a triple {X,a,V) consisting of a set X, a chosen object a G TX, and a 
valuation V interpreting the states of the automaton as subsets of X. More 
specifically, during each round of the game it is the task of 3 to come up with a 
valuation V that creates a one-step model in which a certain one-step formula 
6 (determined by the current basic position in the game) is true. 

Generally, our automata will have the shape A = {A, A, fl, aj) where A is 
a finite carrier set with initial state ai G A, and 17 and A are the parity and 
transition map of A, respectively. The flavour of such an automaton is largely 
determined by the co-domain of its transition map A, the so-called one-step 
language which consists of the one-step formulas that feature in the acceptance 
game as described. 

Each one-step language L induces its own class of automata Aut{L). For 
instance, the class of automata corresponding to the coalgebraic fixpoint logic 
/iML^ can be given as Aw<(MLa), where MLa is the set of positive modal formulas 
of depth one that use modalities from A [3]. Basically then, the problem of 
finding the right class of automata for the coalgebraic monadic second-order 
logic MSOa consists in the identification of an appropriate one-step language. Our 
proposal comprises a one-step second-order logic which uses predicate liftings 
to describe the chosen object of the one-step model. 

Finally, note that similar to the case of standard MSO, the equivalence be¬ 
tween formulas in MSDj and automata in Aut{S0) is only guaranteed to hold for 
coalgebras that are ‘tree-like’ in some sense (to be defined further on). 

Theorem 1 (Automata for coalgebraic MSO). For any set A of monotone 
predicate liftings for T there is an effective construction mapping any formula 
If G MSOa into an automaton A^p G ^^^(SOa), which is eguivalent to ip over 
T -tree models. 

The proof of Theorem [1] proceeds by induction on the complexity of MSOj- 
formulas, and thus involves various closure properties of automata, such as clo¬ 
sure under complementation, union and projection. In order to establish these 
results, it will be convenient to take an abstract perspective, revealing how clo¬ 
sure properties of a class of automata are completely determined at the level of 
the one-step language. 
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1.4 Bisimulation Invariance 


With automata-theoretic characterizations in place for both coalgebraic MSO and 
the coalgebraic /r-calculus ^ML, we can address Question [T] by considering the 
following question: 

Question 2. Which functors T satisfy Aut(}Mf) = Aut{^Q)/^9 

Continuing the program of the third author we will approach this ques¬ 
tion at the level of the one-step languages, SO and ML. To start with, observe 
that any translation (from one-step formulas in) SO to (one-step formulas in) 
ML naturally induces a translation from SO-automata to ML-automata. A new 
observation we make here is that any so-called uniform construction on the 
class of one-step models for the functor T that satisfies certain adequacy condi¬ 
tions, provides (1) a translation (■)* : SO —ML, together with (2) a construction 
(•)* transforming a pointed T-model (S, s) into a tree model (S*, s*) which is a 
coalgebraic pre-image of (S, s) satisfying 

A accepts (§*,s*) iff A* accepts (§, s). 

From this it easily follows that an SO-automaton A is bisimulation invariant iff 
it is equivalent to the ML-automaton A*. 

On the basis of these observations we can prove the following generalisation 
of the Janin-Walukiewicz Theorem. 

Theorem 2 (Coalgebraic Bisimulation Invariance). If the set functor J admits 
an adequate uniform construction, then 


/rMLj = MSDt/^:^. 


In our eyes, the significance of Theorem [2] is twofold. First of all, the proof 
separates the ‘clean’, abstract part of bisimulation-invariance results from the 
more functor-specific parts. As a consequence, Theorem[5]can be used to obtain 
immediate results in particular cases. Examples include the power set functor 
(standard Kripke structures), where the adequate uniform construction roughly 
consists of taking w-fold products (see Example[T|), the bag functor (Example!!]), 
and all exponential polynomial functors (Corollary |3|). Second, in case the 
functor does not admit an adequate uniform construction. Theorem |!| may still 
be of use in proving alternative characterization results for the functor. 

Instantiating the latter phenomenon is the monotone neighborhood functor 
Ai (see the next section for its definition). The importance of this functor lies, 
among other things, in it providing a coalgebraic semantics for monotone modal 
logic [Ij. The coalgebraic monadic second-order language MSO^vi is equivalent 
to a natural second-order language for reasoning about monotone neighbor¬ 
hood structures that we shall denote by MMSO, and /iML^ is equivalent to the 
fixpoint-extension of the monotone /i-calculus, denoted /iMML. As we shall see 
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in ProDOsitionfT^ below. j\4 does not admit an adequate uniform construction!! 
This, however, is not the end of the story. It turns out that we can find an 
adequate uniform construction for a variant A4* of the functor A4 (see Propo¬ 
sition m. As a corollary, we obtain a characterization of the fragment of MMSD 
that is invariant under global bisimulations (bisimulations that are full on both 
domain and codomain). This fragment turns out to be exactly the extension of 
the monotone ^-calculus with the global modalities (for precise definitions we 
refer to section 0), which we shall denote 

In this notation, our final contribution is the following characterization re¬ 
sult: 

Theorem 3. A formula in MMSO is invariant for global neighborhood bisimula¬ 
tions if, and only if it is equivalent to a formula of the logic fiMMLg. 


2 Some technical background 

In this paper we assume familiarity with the basic theory of modal (fixpoint) 
logic, monadic second-order logic, coalgebra, coalgebraic modal (fixpoint) logic, 
and parity games. Here we fix some notation and terminology. 

2.1 Kripke models and their logics 

We restrict to the theory of modal logic with one modality (and hence, one 
accessibility relation). Let Var be a fixed infinite supply of variables. A Kripke 
model is a structure § = (S', R, V) where S is a set, R C S x S and V : Var —>• 
V{S) is a Par-valuation. Associated with such a valuation V, we define the 
conjugate coloring : S —>• V^Var) by P^(s) := {p G Var | s G V(p)}. Given 
a subset T C S, the valuation V\p T] is as V except that it maps the variable 
p to T. A pointed Kripke model is a structure (S, u) where S is a Kripke model 
and u is a point in S. Turning to syntax, we define the formulas of monadic 
second-order logic MSO through the following grammar: 

ip ::= sr(p) \p<Gq\ R{p, q) \ ^(p \ (p V (p \ 3p.p, 

with p,q G Var. Formulas are evaluated over pointed Kripke models by the 
following induction: 

• (S, R, V, u) N sr(p) iff V(p) = {u} 

• (S, R,V, u) \= p C q iS V{p) C V(q) 

• (S, R, V, u) N R{p, q) iff for all u G K (p) there is ic G K (q) with vRw 

• standard clauses for the boolean connectives 

^This does not necessarily mean that the monotone /r-calculus /iML^ does not correspond 
to the bisimulation-invariant fragment of MSO^vi» but it does mean that a proof of such a result, 
if provable at all, will be significantly more involved than for those functors where Theorem [2 
does apply. 
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• {S, R, V, u) N Bp.ip iff {S, R, V[p T],u) \= ip for some T C S. 

We present the language of the modal /r-calculus /rML in negation normal 
form, by the following grammar: 

:^::=p|-'p|_L|T|(^V(^|(^A:^| 'Onp \ ()ip \ r]p.ip 

where p € Var, p G {/r, z/}, and in the formula pp.ip no free occurrence of the 
variable p may be in the scope of a negation. 

The satisfaction relation between pointed Kripke models and formulas in 
fiML is defined by the usual induction, with, e.g. 

• {S,R,V,u) \= pp.ifi iff u G r\{^ ^ ^ I ^p{Z) C Z} where ipp{Z) denotes 
the truth set of the formula ip in the model (S', R, V[p Z]). 

We assume familiarity with the notion of bisimilarity between two (pointed) 
Kripke models, and say that a formula of MSO is bisimulation invariant if it has 
the same truth value in any pair of bisimilar pointed Kripke models. 

Fact 1. A formula ip of MSO is equivalent to a formula of /iML iff p is 
invariant for bisimulations. 

2.2 Coalgebras and models 

Our basic semantic structures consist of coalgebras together with valuations. 
We only consider coalgebras over the base category Set with sets as objects 
and functions as arrows. The co- and contravariant power set functors will be 
denoted by V and Q : Set —>■ Set”^, respectively. Covariant endofunctors on 
Set will be called set funetors. 

Definition 1. Let T be a set functor. A T -eoalgebra is a pair {S, a) consisting of 
a set S, together with a map a : S ^ TS. A T-model is a structure § = {S, a, V) 
where {S,a) is a T-coalgebra and V : Var VS. A pointed T-model is a 
structure (§, s) where S is a T-model and s G S. 

The usual notion of a p-morphism between Kripke models can be generalized 
as follows: Let §i = (S'i,tTi,Ki) and S 2 = (>S' 2 , 0 - 2 , V 2 ) be two T-models and let 
/ : S'! —> 5*2 be any map. Then / is said to be a T-model homomorphism if: 

1. for each variable p and each u G Si, we have u G Vi(p) iff f(u) G V 2 (p); 

2. the map / is a eoalgebra morphism, i.e. we have 


0-2 O / = T/ O CTi. 


Two pointed coalgebras (S, s) and (S', s') are behaviorally equivalent if s and s' 
can be identified by coalgebra morphisms / : S —>■ T and /' : S' —>■ T such that 
f{s) = ns'). 
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A coalgebraic logic consists of a set L of formulas together with, for each 
coalgebra {S,a), a truth or satisfaction relation Ih C 5" x L. A formula (f is 
called bisimulation invariani^ if §, s Ih (/? S', s' Ih ip whenever S, s ~ S', s'. 

Kripke frames are coalgebras for the (covariant) power set functor V. A 
functor of particular interest in this paper is the monotone neighborhood functor 
M , usually defined as the subfunctor of Q o Q given by 

MX = {N & QQX \ \fZ,Z' ■■ Z & N k Z Q Z' ^ Z' & N}. 

This functor comes equipped with the following notion of bisimilarity. A neigh¬ 
borhood bisimulation between Af-models Si and S 2 is a relation R G Si x S2 
such that, if sii?S 2 then: 

• F;(si) = y;(s2); 

• for all Zi in cri(si) there is Z 2 in cr 2 (s 2 ) such that, for all ^2 S Z 2 there is 
ti € Zi with tiRt 2 ] 

• for all Z 2 in 172 ( 52 ) there is Zi in cti(si) such that, for all ti € Zi there is 
t 2 € Z 2 with tiRt 2 - 

2.3 Coalgebraic /i-calculus & coalgebra automata 

The modal /r-calculus is just one in a family of logical systems that may collec¬ 
tively be referred to as the coalgebraic fi-calculus [1]. These logics essentially 
make use of predicate liftings. 

Definition 2. Given a set functor T, an n-place predicate lifting for T is a 
natural transformation 

A: Q(-)”^QoT, 

where Q(—)"■ denotes the n-fold product of Q with itself. A predicate lifting A 
is said to be monotone if 

Ax(hi, dji) C Ax(2'i,..., Z„), 

whenever 1) C Zi for each i. The Boolean dual A'^ of A is defined by 

(Zi, ..., Zn) ^TX\ {Xx{X \ Zi, ..., X \ Zn)). 

Given a set functor T, the language /iMLj of the coalgebraic /r-calculus for 
T is defined thus: 

if ::=p\^p\ ±\T \ X{(pi,...,ipn) \ ip\J Lp\ip Xip \ rjp.ip 

^Strictly speaking, behavioral equivalence and bisimilarity are distinct concepts. However, 
in many concrete cases, behavioural equivalence and bisimilarity coincide, so we shall be 
content to use the more common parlance of “bisimulation invariance” rather than “invariance 
for behavioural equivalence. 



where p € Var, A is any monotone n-place predicate lifting for T, 77 G {/i, t/}, 
and, in pp.p, no free occurrence of the variable p is in the scope of a negation. 
If we restrict the formulas Pn) so that A must come frome some distin¬ 

guished set of liftings A, then we denote the corresponding sublanguage of ^rMLj 
by 

The semantics of formulas in a pointed T-model is defined as follows: 

• (§, s) 1= p iff s G (p) and (S, s) 1= -ip iff s ^ 1^(p) 

• (§,s) 1= A(pi,...,p„) iff cr(s) G Asdipill,||p„||), where ||pdl = {t ^ S \ 
(§, t) N Pi} denotes the “truth set” of pi in § 

• standard clauses for the boolean connectives 

• (§, s) N pp-p iff s G ^ I Vpi^) ^ where (pp{Z) denotes the 

truth set of the formula p in the T-model {S, a, V[p 1 -^ Z]). 

It is routine to prove that all formulas in pMLj are bisimulation invariant. 
Turning to the parity automata corresponding to the language pML^, we 
first define the modal one-step language ML]^. Its set ML]^(A) of modal one-step 
formulas over a set A of variables is given by the following grammar: 

p ::= T I T I A('i/'i,..., V'n) | pVp | pAp 

where are formulas built up from variables in A using disjunctions 

and conjunctions. 

Definition 3. Given a functor T and a set of variables A, a one-step model 
over A is a triple (X, a, V) where X is any set, a G TX and V : A —)■ 'P(X) is 
a valuation. 

The semantics of formulas in the modal one-step language in a one-step 
model is given as follows: 

• standard clauses for the boolean connectives, 

• (X,a,V) 1=1 iff a G Ax(||^i||, ■■■, ||V’n||)> where \\-ipi\\ C X is 

the (classical) truth set of the formula xfi under the valuation V. 

We can now define the class of automata used to characterize the coalgebraic 
p-calculus. 

Definition 4. Let P be a finite set of variables and A a set of predicate liftings. 
Then a (P-chromatic) modal K-automaton is a tuple (A, A, 17, aj) where A is a 
finite set of states with o/ G A, 

A : A X V{P) MLa(A) 

is the transition map of the automaton, and 17 : A —>■ w is the parity map. The 
class of these automata is denoted as Aut(MLA). 
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Position 

Pl’r 

Admissible moves 

{a, s) G A X S 

3 

{U-.A^VS\ {S, <7{s),U) Ni A(a, FT(s)) 

U -A ^ VS 

V 

{{b,t)\tGU{b)} 


The acceptance game for an automaton A = (A, A,r2, a/) and a T-model 
{S, a, V) is given by the following table: 

The loser of a finite match is the player who got stuck, and the winner of 
an infinite match is 3 if the greatest parity that appears infinitely often in the 
match is even, and the winner is V if this parity is odd. The automaton A accepts 
the pointed model (S, s) if 3 has a winning strategy in the acceptance game from 
the starting position (o/,s). We say that and automaton A is equivalent to a 
formula (p G if, for every pointed T-model (S, s), we have that A accepts 
(S, s) iff (S, s) 1= ip. 

Fact 2. Let T be a set functor, and A a set of monotone predicate liftings 
for T, closed under Boolean duals. Then 

= AMt(MLA). 

That is, there are effective transformations of formulas in into equivalent 

automata in Aut(ML\), and vice versa. 


3 Coalgebraic MSO 

We now introduce coalgebraic monadic second-order logic for a set functor T 
and a set of liftings A and show how MSO can be recovered as a special case. 
We define the syntax of the monadic second-order logic MSOj by the following 
grammar: 


(/?::= T I sr(p) \ p <= q \ X{p, qi, .., g„) | v? V | | 3p.p 

where A is any n-place monotone predicate lifting and p,q,qi, ...,qn € Var. 
More generally, restricting to a set A of monotone liftings for T, we define the 
sublanguage MSOa C MSOj by the same grammar except that we require the 
liftings to be in A. 

For the semantics, let (§, s) be a pointed T-model. We define the satisfaction 
relation N C 5” x MSOj as follows: 

• (S,u) N sr(p) iff V(p) = {u}, 

• (S,u) 1= p C q iff V(p) C V(q), 

• (S,u) N X(p,qi, ...,qn) iff (^{v) G Xs(y{qi), ..,F(g„)) for all v G V{p), 

• standard clauses for the Boolean connectives 

• (S, u) 1= 3p.p iff {S,a,V[p ^ Z],u)\= p, some Z C S. 
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We introduce the following abbreviations: 

• p = q for p ^ q A q C 

• Em(p) for yq.{q C p ^ q = p), 

• Sing(p) for -iEm(p) A Vg(g C p —>• (em{q) W q = p)) 

expressing, respectively, that p and q are equal, that p denotes the empty set, 
and that p denotes a singleton. 

Clearly, standard MSO is the logic where O is the predicate lifting 

corresponding to the usual diamond modality over Kripke models. Obviously 
then, MSD^ contains MSO. In order to see that the languages are in fact equivalent 
in expressive power, we need the notion of expressive eompleteness^ which plays 
an important role in this paper. 

Definition 5. A set of monotone liftings A for a set functor T is said to be 
expressively complete if, for every finite set of variables A and every monotone 
predicate lifting A : Q{—)^ —>■ Q o T, there exists a formula p G MLj^(A) such 
that, for every one-step model (X, a, V) with V : A ^ Q(A), we have 

{X,a,V) Ni iff a G Ax(I^)- 

If A is expressively complete, then clearly /iML^Y is equivalent in expressive 
power to the full language /rMLj. It is not much harder to show that, under 
the same conditions, MSO a is equivalent in expressive power to the full language 
MSOj. Furthermore, expressive completeness can often be obtained fairly easily 
if we make use of an application of the Yoneda lemma to represent n-place 
predicate liftings as subsets of T(2"), a method developed in [14]. In particular, 
since the liftings {□, 0} for 7^ are expressively complete and □ is clearly definable 
in MS0{q}, one can show that MSO = MSO^^j. is equivalent in expressive power to 
the full coalgebraic logic MSO-p. Furthermore, pKL-p is equivalent to /iML_j-Q 
As a second example, involving the monotone neighborhood functor A4, let □ 
here be the predicate lifting defined by a G □x(^) iff ^ G a, and let 0 be 
its dual. Then the language MSOxi is equivalent to MS0{n^q}, and also is 

equivalent to 

Finally, as mentioned in the introduction, the key question in this paper will 
be to compare the expressive power of coalgebraic monadic second-order logic 
to that of the coalgebraic /x-calculus. The following observation, of which the 
(routine) proof is omitted, provides the easy part of the link. 

Proposition 1. Let K he a set of monotone predicate Ifitings for the set functor 
T. There is an inductively defined translation (•)* mapping any formula p G 
/iMLyY to an equivalent formula G MSOa. 

4 Automata for coalgebraic MSO 

In this section, we introduce automata for coalgebraic monadic second-order 
logic. 
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4.1 A general perspective on parity automata 

Standard monadic second-order formulas can be translated to equivalent au¬ 
tomata over trees, but this equivalence is not guaranteed to extend to arbitrary 
Kripke models. In the case of general coalgebra, we should expect having to 
introduce a coalgebraic concept of “tree-like” models. 

Definition 6. Given a set S and a G T5', a subset X C S' is said to be a support 
for a if there is some ,5 G TX with Tix^siP) = o- A supporting Kripke frame 
for a T-coalgebra (S, tr) is a binary relation RC S x S such that, for all u G S, 
R{u) = {r; I uRv} is a support for a{u). 

Definition 7. A T-tree model is a structure (S,i?, w) where § = {S,a,V) is a 
T-model and u € S, such that i? is a supporting Kripke frame for the coalgebra 
(S, cr), and furthermore {S,R) is a tree rooted at it, so that there is a unique 
i?-path from it to ic for each ic G S. 

Our goal is to translate formulas in MSOj to equivalent automata over T-tree 
models. We start by introducing a very general type of automaton, originating 

with [It] . 

Definition 8. Given a finite set A, a generalized predicate lifting over A com¬ 
prises an assignment of a map 

Vx : (QA)^ ^ QJX. 

to every set X. Goncepts like Boolean dual and monotonicity apply to these 
liftings in the obvious way. 

The difference with respect to standard predicate liftings is that the compo¬ 
nents of a generalized predicate lifting do not need to form a natural transfor¬ 
mation]^ 

Definition 9. A one-step language L consists of a collection L(4) of generalized 
predicate liftings for every finite set A. The semantics of a generalized predicate 
lifting y; in a one-step model (A, a, V) is given by 

{X,a,V) iff a& ipx{V). 

Our automata will be indexed by a (finite) set of variables involved, corre¬ 
sponding to the set of free variables of the MSOj-formula. 

Definition 10. Let P C Var be a finite set of variables and let L be a 
one-step language for functor T. A (P-chromatic) L-automaton is a structure 
{A, A, Q, ai) where 

• 4 is a finite set, with a/ G A, 

An the style of abstract logic, it would make sense to require a general predicate lifting 
to be natural with respect to certain maps, in particular, bijections. For the purpose of this 
paper such a restriction is not needed, however. 
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• ri : ^ w is a parity map, and 

• A : >1 X V[P) L(^) is the transition map of A. 

The acceptance game of A with respect to a T-tree model {T, R,a,V,u) is 
given by Tabled] We say that the automaton A accepts the model (T, R, a, V, u) 
if 3 has a winning strategy in this game (initialized at position (a/,u)). 


Position 

Player 

Admissible moves 

Parity 

{a, s) € A X T 

3 

{U : A ^ V{R{s)) 1 




(i?(s),a(s),C/) Ni A(a,Ft(s))} 

fl(a) 

U : A ^ V{T) 

V 

{ib,t)\teu{b)} 

0 


Table 1: Acceptance game for parity automata. 


4.2 Closure properties 

This abstract level is useful for establishing some simple closure properties of 
automata, based on properties of the one-step language. The first, easy, results 
establish sufficient conditions for closure under union and complementation. 

Proposition 2. If the one-step language L is closed under disjunction, then the 
class of 1.-automata is closed under union. 

Proposition 3. If the monotone fragment of the one-step language L is closed 
under Boolean duals, then the class of h-automata is closed under complemen¬ 
tation. 

The most interesting property concerns closure under existential projection. 
The following terminology is taken from [B] , but instead of relying on a particular 
syntactic shape of one-step formulas, we define the concepts in purely semantic 
terms. 

Definition 11. A predicate lifting (p over A is said to be special basic if, for 
every one-step model (X, a, V) such that 

{X,a,V) 1=1 p 

there is a valuation V* : A ^ Q{X) such that 

• y*{o,) C V{a) for each a € A, 

• V* (a) n V* (b) = 0 whenever a ^b, and 

• {X,a,V*)^ip. 

Call an L-automaton non-deterministic if every lifting A(a,c) is special basic. 

It is easy to see that if the language L is closed under disjunctions, then so 
is its fragment of special basic liftings. From this we obtain the following. 
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Proposition 4. If the one-step language L is closed under disjunction, then the 
class of non-deterministic L-automata is closed under existential projection over 
T-tree models. 

Proof. Suppose A = (A, A,a/,rJ) is a non-deterministic L-automaton for the 
variable set P. Define the P \ g-chromatic automaton 3q.A = {A, A* ,ai, D) by 
setting 

A*(a, c) = A(a, c) V A(a, c U {g}). 

It is easy to see that every T-tree model accepted by A is also accepted by 3p.A. 
Conversely, suppose 3p.A accepts some T-tree model {S,R,a,V,si). For each 
winning position (a, s) in the acceptance game, let V(a,s) be the valuation chosen 
by 3 according to some given winning strategy y. Note that we can assume that 
y is a positional winning strategy, since 3p.A is a parity automaton. It is not 
difficult to see that the automaton 3p.A is a non-deterministic automaton, and 
so for each winning position (a, s) there is a valuation V*^ : A — 'P{R{s)), 

which is an admissible move for 3, such that V*^ (b) C V(^a,s) (b) and such that 

for all bi ^ b2 € A we have V*^ s)(^i) C V*^ s)(^2) = 0 - Define the strategy y* 
by letting 3 choose the valuation V*^ at each winning position (a, s) - this is 
still a winning strategy, since the valuations chosen by 3 are smaller and so no 
new choices for V are introduced. Furthermore, y* is clearly still a positional 
winning strategy. 

From these facts follow by a simple induction on the height of the nodes in 
the supporting tree that the strategy y* is scattered, i.e. that for every s G S 
there is at most one automaton state a such that (a, s) appears in a y*-guided 
match of the acceptance game. So we can define a valuation V' like V except 
we evaluate g to be true at all and only the states s such that 

{R{s),a{s),V*^^^,)) Ni A{as, c U {g}), 

where Ug is a necessarily unique automaton state such that (a, s) appears in 
some y*-guided match, and c is the color consisting of the variables true under 
V at s. It is not hard to show that A accepts (S, R, a, V, si). □ 

4.3 Second-order automata 

We now introduce a more concrete one-step language for a given set functor T 
and a given set of (natural) liftings A, and show that MSOa can be translated 
into the corresponding class of automata. 

Let A be a set of monotone predicate liftings for T. The set of second-order 
one-step formulas over any set of variables A and relative to the set of liftings 
A is defined by the grammar: 

ip ::= a C b \ A(ai,..., a„) | -up \ Lp\/ ip\ 3a.(p, 

where a, &, oi,..., a„ G A and A is any predicate lifting in A. Fixing an infinite 
set of “one-step variables” Vari, and given a finite set A, the set of second-order 
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one-step sentences over A, denoted S0\(A), is the set of one-step formulas over 
A U Vari, with all free variables belonging to A. We write SOj(A) when A 
comprises all monotone liftings for T. 

The semantics of a one-step second-order A-formula in a one-step model 
{X, a, V) (with V ■. A ^ T^i^) is defined by the following clauses: 

• (X, a,V) \=i p C q iS V(p) CV{q), 

• {X,a,V) Ni X{pi,...,pn) iff a e XxlVipi), ...,V{pn)), 

• standard clauses for the Boolean connectives, 

• {X, a, V) 1=1 Bp.if iff {X, a, V[p >->• Ni ip for some S C X. 

Any one-step second-order A-sentence p can be regarded as a generalized 
predicate lifting over A, with 

Px(y) = {a&JX\{X,a,V) Ni p}. 

Note that the syntax of SOj allows negations, implying that not all these pred¬ 
icate liftings are monotone. 

Definition 12. Let A be a set of monotone predicate liftings for T. A second- 
order A-automaton is an L-automaton for L being the assignment of the one-step 
second-order A-sentences S0\(A) to every set of variables A. We write AMt(SOA) 
to denote this class, and AMt(SDT) in case A is the set of all monotone predicate 
liftings for T. 

Our aim is to prove that every formula of MSOa can be translated into an 
equivalent second-order A-automaton (over rooted T-tree models), and the main 
problem here is to obtain closure under existential projection. 

The key to this step is a simulation theorem. First, a useful trick due to 
Walukiewicz m allows us to transform any second-order automaton into one 
in which all the one-step formulas are monotone, when regarded as generalized 
predicate liftings. We call such an automaton a monotone automaton. 

Proposition 5. Let A he any set of monotone predicate liftings. Every automa¬ 
ton A € Awt(SOA) is equivalent to a monotone second-order A S Awt(SDA). 

Proof. Enumerate A as {oi, ...,ak}, and just replace each formula A(a,c) by 

BZi...BZk.Zi C ai A ... A Z^ Q Ok A A(a, c)[Zi/ai] 

where A{a^c)[Zi/Oi] is the result of substituting the variable Zi for each open 
variable at in A (a, c). This new formula is monotone in the variables A and the 
resulting automaton is equivalent to A. □ 

The intuition behind the simulation theorem is the same as that behind the 
standard “powerset construction” for word automata: the states of the new non- 
deterministic automaton A„ are “macro-states” representing several possible 
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states of A at once. Formally, the states of A„ will be binary relations over A, 
and given a macro-state R, its range gives an exact description of the states in A 
that are currently being visited simultaneously. It is safe to think of the macro¬ 
states as subsets of A, however: the only reason that we have binary relations 
over A as states rather than just subsets is to have a memory device so that we 
can keep track of traces in infinite matches. For each macro-state R and each 
colour c we want to be able to say that the one-step formulas corresponding to 
each state in the range of R hold, so we want to translate the one-step formulas 
over A into one-step formulas over the set of macro-states. In order to translate 
a formula A(a, c) to a new one-step formula with macro-states as variables, we 
have to replace the variable b in A(a, c) with a new variable that acts as a stand- 
in for b. For this purpose we introduce a new, existentally quantified variable 
Zh, together with a formula stating explicitly that is to represent the union 
of the values of all those macro states that contain b. Furthermore we want all 
the one-step formulas to be special basic, and for this purpose we simply add a 
conjunct “disj” to each one-step formula, stating that the values of any pair of 
distinct variables appearing in the formula are to be disjoint. Finally, in order 
to turn A„ into a parity automaton, we use a stream automaton to detect bad 
traces (see for instance [TB] for the details in a more specific case). 

Theorem 4 (Simulation). Let A be a set of monotone predieate liftings for T. 
For any monotone automaton A G Aut{S0\) there exists an equivalent non- 
deterministie A' G AMt(SDA). 

Given a set A, we consider the set 7^(A x A) as a set of variables. Let 
disj := /\ VX.(X CB/\X CB') ^Em(X) 

B^B'CAxA 

Pick a fresh variable Za for each a G A. Given a 1-step formula (p, let 

Fl^a/a] 

be the result of substituting Za for each free variable a G A in tp. If we enumerate 
the elements of A as ai,..., Ofc, we now define the formula for 6 G A to be 

3Za,..3Za,.Ai<^<k(Eq(^a,UlB' I (b,a,) G B'j) A 
Fl^a/a]) 

where Eq(Zo. y}{B' \ {b^af) G B'}) is a formula asserting that the value of the 
variable Zai is the union of the values of all variables B' with (&, Oi) G B'. 

Let A = (A, A, a/, Ll) be any monadic A-automaton. We can assume w.l.o.g. 
that A is monotone. We first construct the automaton A„ = (A„,A„,aj,F) 
with a non-parity acceptance condition F C {AnA as follows: 

• A„ = 7^(A X A) 

• A„(B, c) = disj A AbeTTsiB] 
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• a*j = {( 07 , 07 )} 

• _F is the set of streams over V{Ax A) with no bad traces. 

Here, 772 is the second projection of a relation B so that 772 [H] denotes the 
range of B. A trace in a stream {Bi, B 2 , B 3 ,...) over V{A x A) is a stream 
(oi, 02 , 03 , ...) over A with oi € 7r2[Hi] and (oj_i, Oj) S Bj for j > 1. A trace is 
bad if the greatest number n with H(oi) = n for infinitely many 07 is odd. 

The new automaton A„ is clearly special basic, because of the disj-formulas. 

Lemma 1. A„ is equivalent to A, provided that A is monotone 

Proof. Fix a pointed T-tree model (§, i?, S 7 ) where S = {S,a,V). We want to 
show that A accepts (S, R, sj) if and only if A„ does. That is, we want to show 
that the languages L{A) and L(A„) defined by these two automata are the same. 

First part: L(A) C L(A„) 

Suppose first that A accepts (S, R, sj). Let y be a positional winning strategy for 
3 in the acceptance game, mapping each winning position (o, s) to a valuation 
U : A ^ Q(R(s)) such that 

(R(s),a(s),l7) Ni A(o,y'l’(s)) 

Such a strategy exists since A is a parity automaton, and so the acceptance game 
is a parity game. We define the winning strategy x* for 3 in the acceptance 
game for A„ as follows: given a position (B, s), define the function /b,s : R(s) —>■ 
V(A X A) by setting 

fB,s(s') = {(a,b) I a G 7r2[B] & s'e x(a, s)(5)} 

At the position (B, s), let 3 choose the following valuation x*(i3, s), defined by: 

X*(B, s)(B') = {s' e R(s) I /bAs') = B'} 

Our first claim is that, for each position of the form {B, s) where each (5, s) for 
b G 712 [B] appears in some X"Coherent match of the acceptance game for A with 
start position {ai,si), the move for 3 given by the strategy x* is legal. To prove 
this claim we need to check that, for each position (H, s), we have 

(i?(s),a(s),x*(i?,s))Ni A„(H,Ft(s)) 

provided each ( 6 , s) for b G 772 [H] appears in some x-coherent match. First, the 
formula disj is true since the marking x*{B, s) is the inverse of a mapping from 
R{s) to V{A X A). We now have to check that, for each a' G 7 r 2 [H] we have 

(R(s),a(s),x*(B,s)) A A(a',Ht(s))ta' 

We need to find sets S'ai, C R(s) such that (R(s), cr(s), x*(B, s)) with 

the assignment Za^ 1 -^ Sai satisfies the formula 

A(a',VHsmZAa] 
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Since x gives a legal move at the position (o', s) for each o' G 712 [S], each one- 
step model of the form (i?(s), ct(s), x(a^ s)) satisfies the formula A{a',V^{s)). 
Hence, if we assign to each variable Za^ the set x(a^s)(oi), then this variable 
assignment satisfies the formula 

A(o', y^(s))[o 1 -^ Za \ a € A] 

Since the formula A(a', s) is monotone in all the variables the same is true 
for any larger assignment. So it now suffices to prove that 

X{a',s){ai) C lJ{x*(H,s)(H') | {a',ai) G B'} 

since we can then safely take 

Sa,=\J{x*{B,s)iB') I (o',o,) GH'} 

To prove this inclusion, suppose s' G x(®^ s){ai). Let B' be the relation defined 

by 

{d,d') G H' d G 7 r 2 [H] & s' G x(d, s)(d') 

Clearly, {a', at) G B'. Moreover, fB,s{s') = B' by definition, and so s' G 
X*{B,s){B') as required. 

We now show that any x*“Coherent match with start position (aj,s/) is 
winning for 3. We have to prove two things: hrst, that 3 never gets stuck in a 
X*-coherent match, and second, that 3 wins every infinite x*“Coherent match, 
i.e. no infinite x*-coherent match contains a bad trace. 

First we show that 3 never gets stuck. For this to be the case, all we need 
to show that if {B, s) is the last position of some x*-coherent partial match, 
then all the positions (a, s) for a G 7r2[H] are winning positions for the strategy 
X - by our previous claim this guarantees the move x*{B,s) to be legal. We 
prove by induction on the length of a finite partial match that this holds for 
the last position of the match: it holds for ({(a/, a/)}, s/), clearly, since x is a 
winning strategy at (a/,s/). Suppose that the induction hypothesis holds for 
a finite match with last position (B,s). Let (B's') be any position such that 
s' G x*{B,s){B'). Then 

B' = /b,s(s') = {(a, 6) I a G tt 2 [B] and s' G x(a, s)(5)} 

So suppose b G 712 [H']. Then there is some a with (a, b) G B', and we must have 
a G tt 2 [B] and s' G x(a)S)(5). But since the position (a, s) is winning by the 
inductive hypothesis, this means that (6, s') is a winning position for x, and we 
are done. 

We now show that 3 wins every infinite x*“Coherent match. For this, it 
suffices to show that every trace (oi, 02 , 03 ,...) in a x*-coherent infinite match 

(-Bij si), (i? 2 , S 2 ), (Ha, S 3 ),... 

corresponds to a X"Coherent match 

(a/, si) = (ai, si), ( 02 , S 2 ), ( 03 , S 3 ),... 
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So fix a trace (oi, 02 , S3, ...) meaning that for each Oi we have (oi, Oi+i) € 
We have to show that s^+i G x(oi) Si)(ai+i) for each i. We have 


meaning that i?i+i is equal to 

fBi,siisi+i) = {(a, 6 ) I a G TT2[Bi] k Sj+i G xia,Si){b)} 

In particular, since (oj, 0^+1) G -Bi+i, this means we must have Sj+i G x(ai, Si)(ai+i) 
as required. 

Second part: L(A„) C A (A) 

Conversely, suppose A„ accepts (S, s/) with winning strategy y. We construct 
a winning strategy y* for 3 w.r.t A. Note that the strategy y is not necessarily 
positional, since the acceptance game is not a parity game. 

By induction on the length of a y*-coherent partial match 


M = (oi, si), ( 02 , S 2 ), (03, S 3 )...(afc, Sfc) 

with (ai,si) = ( 07 , 57 ), we are going to define a next legal move y*(M) for 3, 
and by a simultaneous induction we construct a y-coherent partial match 


N — {Bi, Si), {B2, S2), (i?3, S3)...(i?fc, Sfe) 

with (i?i,si) = ( 0 ^, 57 ), Qj G TT 2 [Bj\ for each j and {aj-i,aj) G Bj for each 
k > j > 1. Furthermore we will make sure that whenever a y*-coherent match 
M is an initial segment of a match M', the y-coherent match associated with 
M is an initial segment of the y-coherent match associated with M'. It will 
follow at once that y* is a winning strategy, since 3 never gets stuck in any 
y*-coherent partial match and, furthermore, every infinite y*-coherent match 
corresponds to a trace in some y-coherent infinite match. 

The base case of the induction is the unique match of length 1 with the 
single position (07,57), and we take the corresponding position to be (0^,57). 
Now, suppose y* has been defined on all matches of length < k, and let M be 
a y*-coherent partial match of length k of the form 

(Oi, Si), (02,52), (03,53)...(afc, 5 fe) 

By the inductive hypothesis we have a corresponding y-coherent match N which 
we write as 

(Bl, 5 l), (i? 2 , 52), (i? 3 , S 3 )...{Bk, Sk) 

with Ofc G TT 2 [Bk\- Now we define the next legal move y*(M) for 3, and we show 
that for every position (o', s') such that s' G y*(M)(a'), we can find a relation 
B' such that ( 0 ^, 0 ') G B' and 

(Si, Si), (^2,52), {B 3 ,S 3 )...{Bk,Sk), (s', s') 
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is a X"Coherent match. 

Since is a x-coherent partial match and x is a winning strategy for 3, we 
have that 

(i?(sfe),cr(sfe),x(A^)) t=i A„(Sfe,yi(sfe)) 

Since Ofc € T!' 2 [Bk], this means that there exist sets St C R{sk) for each b G A 
such that the 1-step model {R{sk),(j{sk),x{^)) satisfies the formula 

^,^^Eq{Z,,[j{B'\{ak,b)€B'}) A 

Aiak,VHsk))[Zh/b] 

under the assignment Zh Sb- Hence, the valuation U defined by 

U :b ^ Sb 


will be such that 

{R{sk),(T{sk),U) 1=1 A(afc,Hi(sfc)) 

So we set x*{^) = U, a. legal move. Note that we have 

U{b) = \J{x{N){B') \ {ak,b) e B'} 

Now, let {a', s') be such that s' € U{a'). This means that there is some B' 
with {ak,a') £ B' and s' £ xi^){B')- Hence, {B',s') satisfies the required 
conditions, and we are done. □ 

The only thing left to do at this point is to transform this automaton into 
one that has its acceptance condition given by a parity map. The set of streams 
over T’(AxA) that contain no bad traces w.r.t. the parity map H is an w-regular 
stream language, so let 

Z = (Z,(5, 

be a parity stream automaton, S : Z x V{A x A) ^ Z, that recognizes this 
language. We now construct the automaton 

A„©Z=«,A;,a',H;) 


as follows: 

• A'^ = An X Z 

• a'j = {a*j,zi) 

• ^n{B,z) = n{z) 

• A'niiB,z),c) = AniB,s)[iB',S{B,z))/B'] 

It is not difficult to check that A„ © Z is equivalent to A„. Since A„ © Z is 
clearly still a non-deterministic automaton, this ends the proof of the simulation 
theorem. 

Combining Proposition |4] with Theorem |4l we easily obtain the following 
closure property. 
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Proposition 6. Let K he a set of monotone predicate liftings for a set functor 
T. Over T-tree models, the class of second-order A-automata is closed under 
existential projection. 

We can now use the closure properties we have established for second-order 
automata to give the desired translation of MSOj into second-order automata. 

Proposition 7. For every formula ip S MSOa with free variables in P, there 
exists a P-chromatic automaton G ^Mt(SOA) which is equivalent to Lp over 
T -tree models. 

Proof. Proceeding by a straightforward induction on the complexity of (p, we 
leave it to the reader to construct appropriate automata for the atomic formulas. 
The inductive cases for disjunction and negation follow by the Propositions [2] 
and [H together with the easy observation that the one-step language SOa is 
closed under disjunction and Boolean duals. The case of existential quantifica¬ 
tion is taken care of by Proposition [B] □ 

Theorem [T] is immediate from this, as is the following. 

Corollary 1 . Suppose A is any set of monotone predicate liftings for T such that 
MSOt = MSOa. Then for every formula o/MSDj, there exists an equivalent second- 
order A-automaton over T -tree models. In particular, this holds whenever A is 
expressively complete. 

5 Bisimulation invariance 

This section continues the program of making use of the automata-theoretic 
translation of MSOj we have just established. The gist of our approach is that, 
in order to characterize a coalgebraic fixpoint logic /iMLj as the bisimulation- 
invariant fragment of MSOj, it suffices to establish a certain type of translation 
between the corresponding one-step languages. First we need some definitions. 

Definition 13. Given sets X, Y, a mapping h : X and a valuation V : A ^ 
Q{Y), we define the valuation : A —>• Q(X) by setting V[/i](6) = h~^\V{b)\ 
for each b ^ A. 

The most important concept that we take from m is that of a uniform 
translation (called uniform correspondence in [T7]l: 

Definition 14. Given a functor T, a uniform construction F for T takes each 
pair {X, a) with a G TAT to a tuple consisting of a set Ai,, an o* G T(Ar*), and 
a map ha : AT, X such that 

T(/la)(Q!*) = a 

We say that the second-order one-step language S0 (y(A) admits uniform trans¬ 
lations if, given any natural number k, there exists a uniform construction F 
and an assignment of a monotone (natural) predicate lifting 

F* ■■ QH^^QoJ 
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to each monotone one-step formula ip G S0\ with free variables A and quantifier 
depth at most k, such that for any one-step model {X, a, V), we have 

{X, a, V) 1=1 if* iff (X*, a*, V[h^]) \=i p. 

Remark 1. It is easy to see that every monotone predicate lifting A : Q(——?> 
Q o T is equivalent to an atomic formula of MLj(A). In the following we shall 
not take care to distinguish between such a monotone predicate lifting and the 
corresponding atomic formula. 

Definition 15. Any translation (•)* : SD\ —>■ MLj induces a construction on 
automata, transforming a second-order A-automaton A = (A, A, a/, 12) into the 
modal automaton A* = (A, A*, a/, 12), with A* given by A*(a, c) := (A(a, c))*. 

The proof of the following result closely follows that of the main result in 
m- The main difference with HZ] is that here we need an “unravelling”-like 
component. 

Proposition 8. Assume that SO)^ admits a uniform translation (•)*, and let A 
be a second-order A-automaton. Then for each pointed T -model (§, s) there is a 
T-tree model (T, with a T-model homomorphism f from T to §, mapping 

t to s, and such that 

A accepts (T, i?, t) iff A* accepts (S, s). 

Furthermore, given that § = {S,u,V), if the map ha(s) ■ ^ S is surjective, 

so is f. 

Proof. Consider any given pointed T-model (§i,si) where Si = (^i, cti, Vi). 
We are going to construct a T-tree model {E> 2 ,R, S 2 ), §2 = (<5'2, 0 - 2 , V 2 ), together 
with a model homomorphism from the underlying pointed T-model S 2 to Si 
mapping S 2 to si, and such that A accepts the T-tree model (S 2 , S 2 ) if and only 
if A* accepts the pointed T-model (Si,si). 

We construct this T-tree model as follows: for each u G Si, we define an 
associated pair {Xu,au) as follows: set X^ = (S'!)* and set = cri(M)*. 
Observe that, by the construction of these one-step models, for each u G Si, 
there is a mapping 

fu ■ Xu —t Si 

such that 

1 . T(^u)(a„) = ai{u) 

2. For each valuation U : A ^ Q{Si), every u G Si and every one-step 
formula A(a, c) appearing in A, we have 

iSi,aiiu),U) 1=1 A(a, c) iff (A^, a„, l=i A*(a,c) 
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The map is given by We now construct the T-tree model (S2, R, cr2, S2, V2) 

as follows: first, consider the set of all non-empty finite (non-empty) tuples 
(vi, ...,Vn) of elements in 

{si}U U Xu 

u^Si 

such that vi = si. We define, by induction, for each natural number n > 0 a 
subset Mn of this set, and a mapping 7„ : M„ —?■ S'!, as follows: 

• set Ml = {(si)}, and define 7i(si) = si- 

• Set M„+i = {u=i=u; | v G Mn,w G Define 7„+i(v*r(;) = 

Here, we write v * w to denote the tuple (vi,..., ru) if v = (ui,..., v„). Set 
S'2 = Un>o define 7 = lJn>o 7"- Define the relation R C S2 ><■ S2 to be 

{(u, V *w) I U G S'2, w G X^(^i;)} 

Note that there is, for every v G S2, a bijection iff : ~ i?[u| given by 

w 1-^ v*w. Note also that, for each v G S2, we have 

■y o iff = ^^(^ff'j 

With this in mind, we define the coalgebra structure CT2 by setting 

0-2 (v) = T{iff){a^(^ff)) 

Finally, set S2 to be the unique singleton tuple with sole element si, and define 
the valuation V2 by setting V^iv) = H2^(7('y)). 

Clearly, (S2, -R, 0-2, S2, V2) is a T-tree model. Denote the underlying T-model 
by §2- We can then prove the following two claims: 

Claim 1: The map 7 is a T-model homomorphism from S2 to §1. 

Claim 2: A accepts (S2, R, cr2, S2, ^2) iff A* accepts Si. 

The proof of Claim 2 is left to the reader. We prove the first claim: 

The map 7 clearly respects the truth values of all propositional atoms, and 
7(52) = si. It suffices to show that 7 is a coalgebra morphism, i.e. that 
T7 (ct2(u)) = (Ti(7(u)) for all v. Pick any v G 82- We have: 


T7(CT2(ff)) = T7oT(tiT)(a..^(i7)) (1) 

= T{y oiff){a^(^ff)) (2) 

) ( 0 ^( 17 )) (3) 

= cri( 7 (ff)) ( 4 ) 

as required. □ 


From this, a routine argument yields the following result. 

Theorem 5 (Characterization Theorem 1). Let A be an expressively complete 
set of monotone predicate liftings for a set functor T, and assume that SOy^(A) 
(for any set of variables A) admits uniform translations. Then fML^ is the 
bisimulation-invariant fragment of MSOa . 
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The existence of uniform translations for the one-step language m involves 
two components: a translation on the syntactic side and a uniform construction 
on the semantic side. However, as we shall now see, we can focus entirely on 
finding a suitable uniform construction for the one-step models; the syntactic 
translation will come for free. 

Definition 16. Let tp be any formula of SO^(H) of quantifier depth < k, and 
let T" be a uniform construction for k. Then, we define the generalized predicate 
lifting ip* : Q{—)^ —>■ Q o T by setting, for a given set X, a &JX and V ■. A ^ 

a e p}x{^) iff ffi 

The following is obvious: 

Proposition 9. If (p is a monotone formula then (p* is a monotone generalized 
predicate lifting. 

Note that, in order for S0]^(H) to admit a uniform translation, it suffices that 
there exists for any k a uniform construction F such that, for every formula ip 
of quantfier depth < k, the generalized lifting ip* is natural. An equivalent 
formulation of this condition is the following. 

Proposition 10. Let ip be any one-step formula in SO^(A) and let F be a 
uniform construction. Then the lifting ip* is natural if, for any pair of sets 
X, Y, any map f : X ^ Y and any valuation V : A ^ Q{Y), we have 

(*) : O!*) ^[/o/tc] ) ffl T (fA*-! P*l^[hp]) ffl T 

provided that T/(a) = /3. 

A uniform construction F is said to be adeguate for k, and with respect 
to the liftings A, if the equivalence (*) holds for all (monotone) formulas in 
S0\(A) of quantifier depth < k (for any finite set of variables A). Since we 
could of course take the quantifier depth k and the set of liftings as extra inputs 
for the uniform construction, we shall simply say that the functor T admits 
an adequate uniform construction if there is an adequate uniform construction 
for T with respect to every k and every set of monotone liftings. If A is an 
expressively complete set of liftings, this is equivalent to requiring an adequate 
uniform construction with respect to A, for every k. 

The following theorem, from which we obtain Theorem [2] by taking for A 
the set of all monotone liftings for T, summarizes the results of this section. 

Theorem 6 . Let A be any expressively complete set of monotone predicate 
liftings for the set functor T. If T admits an adequate uniform construction, 
then 

pKLx = MSDa/cs. 

Example 1. As a first application, the standard Janin-Walukiewicz charac¬ 
terization of the modal /x-calculus can be seen as an instance of the result by 
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taking A = {□,<)} and T = 7^, recalling that MSO = MSOjoj = MSO{n^o}. The 
adequate uniform construction for V is given as follows: consider a pair (X, a) 
with a e 'P{X). We take this to X* = a* = a x w, and we let /iq, : a x w ^ a 
be the projection map. 

It turns out that several other applications of this result can be obtained in a 
particularly simple way. Say that a uniform construction F is strongly adequate 
if, for any mapping f : X ^ Y and any a gTX, (3 G TY with T f{a) = 13, there 
is a bijection g : X* —>■ W such that Tg(a*) = f3^, and f o ha = hg o g. Since it 
is easy to check that any strongly adequate uniform construction is adequate, 
we get: 

Corollary 2. If there is a strongly adequate uniform construetion for T, then 
/tMLt = MSOj/^i. 

Example 2. As a first example, consider the finitary multiset (“bags”) functor 
B, which sends a set X to the set of mappings f : X ^ uj such that the set 
{u G X \ f(u) — 0} is cofinite. The action on morphisms is given by letting, 
for / G BX and h : X ^ Y, the multiset Bh{f) ■. Y —w be defined by 
w I—>• Ky)- Given a pair X, a where a : X —>■ a; has finite support, we 

define 

X* = [J{{u} X a{u) I u G X}. 

Here, we identify each each n G uj with the set {0,...,n — 1}. The mapping 
a* : X* —w is defined by setting = 1 for all w G X*. The map 

ha : X* —> X is defined by (u, i) i— u. It is easy to check that the construction 
F is strongly adequate, hence /iMLg = MSOg/^. 

As a final application, consider the set of all exponential polynomial func¬ 
tors [3 defined by the “grammar” 

T::=C|ld|TxT|[jT, 1T(-)C 

iei 

where C is any constant functor for some set C, and Id is the identity functor on 
Set. These functors cover many important applications: streams, binary trees, 
deterministic finite automata and deterministic labelled transition systems are 
all examples of coalgebras for exponential polynomial functors, as is the socalled 
game functor whose coalgebras provide the semantics for “Coalition Logic” [2] . 

Proposition 11. Every exponential polynomial functor admits a strongly ade¬ 
quate uniform translation. 

Corollary 3. For every exponential polynomial functor T, we have /rMLj = 
MSDt/~. 

The cases where we can find a strongly adequate uniform construction are 
the most straightforward applications of Theorem[n]that we know of. The Janin- 
Walukiewicz theorem is a less direct application: there is no strongly adequate 
uniform construction for the powerset functor, but there is an adequate uniform 
construction. In the next section, we shall study an example of a functor where 
there is no adequate uniform construction at all. 
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6 The monotone neighborhood functor 

The final section of our paper concerns the monotone neighborhood functor j\4. 
Our main result concerns a characterization of the fragment of MSD>t that is 
invariant under global neighborhood bisimulations, to be introduced below. Our 
proof applies the method of section [Sj but not directly: we will first see that the 
functor A4 itself does not admit an adequate uniform construction. 

6.1 No adequate uniform construction for Ai 

We first consider the negative result. 

Proposition 12. There is no adequate uniform construction for the monotone 
neighborhood functor M . 

Proof. To arrive at a contradiction assume that F is adequate. Fix some a G A 
and consider the formula ip = 'iZ.{a C Z) expressing that a has empty extension. 

Let Y be the set {u,u} and let (3 G MY be the neighborhood structure 
{{u},{u, u}}. Let V be any valuation with V(a) = {u}. First, we prove that 
{Y,fi,V) 1=1 T*- to see this, consider the one-step model {Y',/3'M') where 
A = {{m}} and we recall that Y' = {u}, and where V is simply the restriction 
of V to Y'. It is easy to show that (Yf, l=i T: and hence (Y', ff, V) l=i 

ip*. Since the generalized predicate lifting ip* is natural by assumption and 
Miy.yiP') = /3, we get {Y,f3,V) t=i T* as required. 

With this in mind, let X be the set {u*,v*,w*} and let a G MX be the 
neighborhood structure 


Define the map f : X y- Y hy setting u* ly u, v* ly v and w* u. It can 
easily be checked that Mf{a) = jS. By naturality of the formula ip*, it follows 
that {X,a,V[f]) l=i ip*. Hence we must have 

{X*,ai,,V[fohc]) 1=1 T 

hence V[/o/i„](a) = 0- Since v* G V[f]{a), this means that we have v* ^ ha[X^,]. 
But since Mha[aA) = a, this means ha [If*] must be a support for a. But it 
is easy to show that a cannot have a support S with v* ft. S, so we have now 
reached a contradiction showing that F cannot be an adequate construction. □ 

6.2 The functor At* 

In this section, as a step towards our main characterization result, we shall 
consider the language where the functor M* is a slight variation of 

the monotone neighborhood functor M. The functor M* is obtained as the 
subfunctor of At x P given by 

X ly {{a,Y) G MX x VX \ Y supports a} 
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This is indeed a subfunctor of A4 x V, because given a map h : X ^Y, if Z is 
a support for a £ MX, then h[Z] is a support for Mh{a). Given a £ M*X, 
we will write a = (-/Vq,, So). 

Definition 17. For the functor M* we define the unary predicate liftings □ 
and E by 


DxiZ) := {a £ M*X | Z e iV„} 

Ex{Z) := {a £ M*X | Z n 5'„ 0}, 

and we let 0 be the dual of □ and let E'^ be the dual of E. The set of liftings 
{□, 0, E, E‘^} is denoted as 0. 

The set 0 is an expressively complete set of liftings for M*. We shall omit 
the proof of this fact here, and merely state it as the following proposition: 

Proposition 13. Every monotone natural predicate lifting A : Q(—> QoM* 
is equivalent to a formula in MLe (A). 

The main technical result of this section states the existence, for all A:, of a 
uniform construction F that is adequate for k and with respect to the set of 
liftings {□,!?}. 

Definition 18. Fix a natural number k. Given a set X, and object a £ M*X, 
put 

X* := {(u,i,Z,j) £(X X 2^ X P(Sa) x w) | u e Z}, 

and let ttx be the projection map from X* to X. Define a* = {Na^,Sa„) £ 
M*{Xt,) by setting Sa, = X*, and set Z £ Na„ for Z C Sa, iff \Y,j'] C Z for 
some Y £ ex, Y £ Sa and some j < ui, where 

ry,jl ■.= {{u,i,Y,j)\u£Y,i<2>^}. 

The sets of the form [Z, will be called the basic members of Na*. 

The main goal of this section is to prove the following: 

Proposition 14. The construction given in Definition \18\ is an adequate, uni¬ 
form construction for k. 

It is easy to check that, for all sets X and a £ M*X, we have M*TTx{ceF) = 

a. 

Our main goal in this section is to prove the following result, from which 
Proposition [TTl now follows: 

Lemma 2. Let X,Y be any sets, a £ M*X, (3 £ M*Y and V ■. A ^ Q{X)- 
Suppose that we have a map h : X ^Y such that M*h{a) = p. Then we have 

(X„a„V[Wx])='^ 
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Here, and throughout this section, we write {X, a, V) =* (Y, /3, U) to say that 
two one-step models satisfy the same formulas of MS0 |:q E}i^) at most n 
nested quantifiers. Let us keep the data X, Y, a, /3, V and h fixed throughout 
the proof, and assume that M*h{a) = /3. We will also assume, from now on, 
that Na and Np are both non-empty sets: if one of them is empty then both of 
them are, and in this case the lemma can be proved essentially using an easier 
version of the argument we use below. 

Definition 19. Given a finite set of variables A, a propositional A-type r is a 
subset of A. Given a set X and a valuation V : A ^ QiX), the propositional 
H-type of G X is defined to be H’l'(v) = {a£ A\v £ H(a)}. 

Definition 20. Given a basic member \Z, j] either in or in Np^ , a valuation 
V : A ^ Q{X^,) or V : A ^ Q{Y^,), and a natural number m, the m-signature 
of \Z,j~\ over variables A and relative to the valuation V is the mapping a : 
V{A) —>• {0,..., m} defined by setting (j{t) to be n < m if [Z, contains exactly 
n elements of type t under the valuation V, or a(t) = m if [Z, j] contains at 
least m elements of type t. 

Definition 21. Let B be any set of variables containing A, and let Vi : B ^ 
Q{X^,) and V 2 '■ B ^ Q(Z*). Then for any natural number n we write 

and say that these one-step models match up to depth n, if: for every n-signature 
cr over variables B, either the number of basic elements of signature cr in 
and Np^ respectively are both finite and the same, or both infinite. 

Lemma 3. (W*, a*, %o,rx]) (W,/?*, 

Proof. First note that, for any 2^-signature cr, N either contains no basic ele¬ 
ments of signature ct, or infinitely many: if there is some basic element |"Z, j] 
if signature ct, then for any i j, the basic element \Z,i^ has the same 2*- 
signature as \Z,j~\ with respect to the valuation Vho-wx- The same holds for 
Np^ with respect to the valuation 14^. 

Thus, it suffices to show that A4. contains a basic element of signature a 
w.r.t. V^hoTTx] iff-^/3. contains a basic element of signature cr w.r.t V[7ry]. Suppose 
that Np^ contains a basic element \Z,j'] of signature ct, where Z G Np and 
Z C Sp. Since Np = Mh{Na), we have h~^[Z] G and so h~^[Z] n S'q- G N^. 
Hence we get 

[/i"^[z] nS'a,o] G No,, 

It is easy to see that any basic element of N^,, contains either 0 or at least 2* 
members of a propositional type t w.r.t. V^hoTTx]^ the same is true of any 
basic element of Np, w.r.t. V[ 7 ry]. Hence, to show that |'/i“^[Z] n S'q, 0] has the 
same 2*-signature as \Z,j~\, it suffices to show that these basic elements realize 
the same propositional types over B. So suppose |'/i“^[Z] n Sa, O] contains some 
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element v of type t. Then ttx{v) & h ^[Z] fl Sq, so h o Trx{v) € Z. This means 
that 

{hoTTxiv),0,Z,j) e \Z,j~\ 

and this will have the same propositional type as v. Conversely, suppose that 
\Z,j~\ contains some element w of type t. Then t:y(w) € Z. Since Z C S/ 3 , and 
S /3 = there exists some w' G h~^[Z] n Sc with h{w') = TTyiiv). We get 

{w',o,h-^[z]r\Se„o) G \h-^[z]nSe„o] 

and this will have the type t. 

Now, suppose that Na^ contains a basic element \Z,j~\ of 2^-signature a, so 
that Z G Na and Z C Sa- Then h[Z] G -/Vg, and furthermore h[Z] Q S /3 = h[Sa]- 
Again, it suffices to check that \Z,j~\ and [h[Z], 0] realize the same propositional 
types. Given u G \Z,j~\, we have h o 7 rx(v) G h[Z] and so 

{h o TTx{v),Q,h[Z],Q) G \h[Z],{)\ 

and this will have the same propositional type as v. Conversely, if w G |’h[Z], 0] 
then tty{w) G h[Z\, so there is re' G Z with h{w') = xy{w). We get 

{w',Q,Z,j) G [Z, j] 

and this has the same propositional type as w. □ 

We are going to show, by induction on a natural number m < k, that if two 
one-step models of the form (AT*, a*, Vi) and (F*, /?*, V 2 ) match up to depth 2"^, 
then they satisfy the same formulas of quantifier depth m. For the basis case of 
2° = 1, we need the following result: 

Lemma 4. Let B he a set of variables containing A, and let Vi : B ^ Q(Ar*) 
and V 2 '■ B ^ Q{F^{Y)) be valuations such that 

(W,/3*,C2) 

Then these two one-step models satisfy the same atomic formulas of the one-step 
language MSO. 

Proof. Suppose first that 


X*, a*, Vi) Ni p C q 

where p,q € B. Suppose that V2{p) ^ V2(q). Then there is some (u,i,Z,j) G 
F* such that (u,i,Z,j) G V 2 {p) \ V 2 {q). We have {u,i,Z,j) G [Z,j], and so 
there must be some basic element \Z',j'~\ of of the same 1-signature over 
variables B as \Z,j~\. It follows that there is some element of \Z',j'~\ of the 
same propositional type as {u,i,Z,j), and then we cannot have Vi(p) C Vi{q). 
The converse direction is proved in the same manner. 

Now, suppose that 

(X*,a*,Fi) 1=1 Up 
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Then Vi{p) G -/V„., so there is some basic element \Z,j~\ £ Na, with [Z, j] C 
Vi{p). There must be some basic \Z 'G of the same 1-signature over 
B as \Z,j'\, and clearly it follows that \Z',j'^ C V 2 {p) and so V 2 {p) G Np^ as 
required. The converse direction is proved in the same way. 

Finally, suppose that 

Vi) 1=1 Ep 

Then there is some (u, G Sa, with (it, z, Z, j) G Vi{p). We have (it,i, Z, j) G 

[Z, j], and there must be some basic element \Z',j'~\ of Np^ with the same 1- 
signature as \Z,j~\. Hence, [Z',j'] contains some element {u\i',Z',j') of the 
same propositional type as Z, j), and it follows that 

(y*,/3*,H2) Ni Ep 

as required. The converse direction is proved in the same way. □ 

To clinch the proof of Proposition lldl we now only need the following lemma: 

Lemma 5. Let B be a finite set of variables containing A, let 0 < m < k and 
let Vi : H —>■ Q{X^,) and V 2 '■ B ^ Q(X^,) be valuations such that 

Let q be any fresh variable. Then for any valuation V( extending Vi with some 
value for q, there exists a valuation Vf extending V 2 , such that 


and vice versa. 

Proof. We only prove one direction since the other direction can be proved by a 
symmetric argument. Let V( be given. By the hypothesis, for any 2’"-signature 
cr over the variables H, either the number of basic elements of signature a in 
Na^ and Np^ relative to Vi and V 2 are both hnite and the same, or both infinite. 
Let iji,..., cTfe be a list of all the distinct 2’"-signatures over B such that the set 
of basic elements of and Np^ of signature cr^, with 1 < i < fc, is non-empty 
but hnite, and let tjfc+i,..., cr; be a list of all the 2™-signatures such that, for 
fc -I- 1 < 1 < /, there are inhnitely many basic elements of Na, and of Np^ of 
signature cri. Then, for each i G let a*[cri] denote the set of basic 

elements in Na, of signature ai, and similarly let /3*[cri] denote the set of basic 
elements of Np^ of signature ai. Then q:,[(Ti], ...,a*[(Ti] is a partition of the set 
of basic elements of into non-empty cells, and similarly /3*[tTi], ...,/3fiai] is 
a partition of the set of basic elements of Np^. 

Given the extended valuation V( in X* dehned on variables B U {g}, we 
similarly let ri,...,Tfc. be a list of all the 2"*“^-signatures over B U {q} such 
that, for 1 < z < fc*, the set of basic elements of Na^ of 2™“^-signature Ti is 
non-empty but hnite. We let Tfc*+i,..., tj* be a list of all the 2’"“^-signatures 
over B\j{q} such that, for each z with fc*-|-l < z < 1*, the set of basic elements of 
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Na, of 2™“^-signature Ti is infinite. Let a*[Ti] denote the set of basic elements 
of Na^ of 2™“^-signature n, so that the collection a* [ti], a^, [t;.] constitutes a 

second partition of the set of basic elements of Nc^,. It will be useful to introduce 
the abbreviation Di for the finite set Q;*[cri] U ... and the abbreviation 

D 2 for the finite set U ... U a*[Tfc.]. 

For each i with 1 < i < k, there is a bijection between the set a*[CTi] and 
and we can paste all these bijections together into a bijective map 


/ : a*[cri] U ... U a^[(Jk\ U ... U /3*[crfc] 

Since every basic element of not in Di belongs to a 2’"-signature of which 
there are infinitely many basic elements in /3*, and since Di U D 2 is finite, it is 
easy to see that we can extend the map / to a map g which is an injection from 
the set Di U D 2 into the set of basic elements of , such that for each basic 
element \Z,j^ in Di U D 2 , \Z,j^ and g{lZ,j]) have the same 2’”-signature 
over B, and such that g \ Di = f. Each basic element of Np^ not in the 
image of g must then be of one of the 2 ™-signatures cr^+i,..., crp and so we can 
partition the set of basic elements of Np^ outside the image of g into the cells 
/3*[o'fe+i] \g[D 2 ], ...,/3*[(T/] \g[D 2 ]. For each i with fc + 1 < f < I, let yj, ..., 7 * list 
all infinite sets of the form fl a*[rj] for A:* + 1 < j < I*. The list yj,..., y* 

must be non-empty, and so since the set \ g[D 2 ] is also infinite, we may 

partition it into r many infinite cells and list these as (5j, ...,5*. Now, for each 
basic element [2', j] of /3*, we define a map from B \J {q} to V{\Z,j'\) 

by a case distinction as follows: 

Case 1: |"Z,j] = g{\Z',j'}) for some \Z',j'^ e Di U D 2 . Then \Z,j~\ 
and \Z',j'~\ have the same 2’”-signature over B. Using this fact we define the 
valuation W^z,j] so that, for each p G B, we have W^z,j]{p) = ^ 2 (p) H \Z,j~\, 
and so that \Z',j'~\ and \Z,j~\ have the same 2™“^-signature over BL){q} with 
respect to the valuations V{ and W^zpl ■ 

We show how to assign the value of the variable q: for each propositional 
type t over BL){q}, there are three different possible cases to consider. If \Z',j'~\ 
has I < 2™“^ elements of type tU{( 7 } over B\j{q}, then pick I many elements of 
\Z,j~\ of type t and mark them by q. This is possible since I < 2™“^ < 2™ and 
\Z',j'~\ and \Z,j~\ have the same 2™-signature. If there are I < 2™“^ elements 
of \Z',j'~\ of type t over B U {g}, then pick I elements of \Z,j~\ of type t over 
B, and mark all the other elements of \Z,j'\ of type t by q. Finally, if there 
are at least 2™“^ elements of \Z' of type t U {g} over B U {g} and at least 
2 m-i elements of [Z', j'] of type t over B U {< 7 }, then all in all there must be 
at least 2™ elements of \Z' of type t over B, and so there must be at least 
2™ elements of \Z,j~\ of type t over B. Pick 2™“^ of these and mark them by 
q. Finally, let W\^z,j'\ {<l) be the set of elements of [2', j] marked by q. 

Case 2: \Z,j'] is not in the image of g. Then there must be some i G 
{k* + such that \Z,j~\ G /3*[CTfc+i] \ ( 7 [I? 2 ], and this set is partitioned 

into Let \Z,j~\ G d], and pick some arbitary element \Z',j''\ of the 

set yj. Then [Z', j'] and |"Z, j] have the same 2^-signature over B and we can 
proceed as in Case I. 
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We define the valuation V 2 by setting V^iq) to be the union of the sets 
for \Z,j~\ a basic element in It is now fairly straightforward to 

check that 
as required. 

First, suppose there are infinitely many basic elements of Na, of some 2™“^ 
signature Tj, meaning that k* < j < I*. Then since the set Q!*[rj] is infinite, Di 
is finite and a*[Tj] is equal to 

(£>1 n a*[T,]) U (a*[tTfe+i] n a*[Tj]) U ... U (Q;*[cri] n a*[rj]) 

there must be some i € {k + 1 ,..., Z} such that the set a*[cri] fl a*[Tj] is infinite. 
This means that a*[CTi] fl a*[Tj] appears in the list 7 ^^, ..., 7 *, and so we see that 
all elements of some member of the list 5\, ...,d® will have the 2"*“^-signature 
Tj. Since each member of this list is infinite, we see that there must be infinitely 
many basic elements of of signature r,. 

Conversely, suppose there are infinitely many basic elements of of 2"*“^- 
signature r, over B U {g}. Then since the image of g is finite, some of these 
elements must be outside the image of g, which means that for some i S {fc + 
1 ,...,Z}, some member of the list SI, ...,61 will consist of elements of signature 
Tj. This means that some member of the list 7 J, ..., 7 * will consist of elements 
of signature tj, and since each member of this list is infinite we see that 
has infinitely many basic elements of 2'"“^-signature Tj over B U { 9 }. 

Finally, suppose that there are finitely many basic elements of Na^ and 
iVa, of 2™“^-signature Tj. We check that the mapping g restricts to a bijection 
between the basic elements of Na, and of this signature. First, g is injective 
and maps basic elements of Na^ of signature Tj to basic elements of Np^ of 
signature Tj. It only remains to show that (the restriction of) g is surjective, i.e. 
each basic element \Z, r] of signature Tj is equal to g{\Z', r '~\) for some \Z', r']. 
But suppose \Z, r] is not in the image of g; then it is in one of the members of 
the list SI,..., 61 for some i, and since each of these members is an infinite set 
of basic elements of the same signature, we see that there are inhnitely many 
basic elements of Np^ of signature Tj, contrary to our assumption. Hence, the 
proof is done. □ 

Lemma [5] can now be deduced by combining the last three lemmas, by a 
straightforward argument using Ehrenfeucht-Frai’sse games for the one-step lan¬ 
guage. 

6.3 Global neighborhood bisimulations 

Since the set of liftings {□, 0} can be shown to be expressively complete for M, 
and since 0 is just the dual of □, the monadic second order language MSO^k is 
equivalent to the logic MMSD which has its syntax given by 

(fi ::= sr(p) \ p^q \ □(p, q) \ 3p.ip | -.p | p V p. 
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The semantics of an atomic formula □(!>, q) in a neighborhood model S is given, 
concretely, by the clause: {S,a,V,u) 1= D{p,q) if, for all v € V{p), there is 
Z G a{v) such that Z C V{q). 

At the present time, we do not know how to characterize the fragment of the 
language MMSO that is invariant for arbitrary neighborhood bisimulations. How¬ 
ever, the situation changes if we consider global bisimulations between neigh¬ 
borhood models. 

Definition 22. A global neighborhood bisimulation between Ai-models §i and 
§2 is a neighborhood bisimulation R that satisfies the conditions: 

Forth For every u € Si there is some v G S 2 with uRv 

Back For every v G S 2 there is some u G Si with uRv 

We now ask: what is the fragment of MMSO that is invariant for global neigh¬ 
borhood bisimulations? Since global bisimulations are the natural equivalence 
relation for modal logic with the global modalities, the most reasonable candidate 
would be: the monotone modal /i-calculus extended with the global modalities. 
To be precise, let the monotone modal p-calculus with global modalities, denoted 
/iMMLg, be the language defined by the grammar: 


(/? ::= p I -.p I T I T I I I [V]v? I [3](p 

I p V (p I p A (p I pp.p I vp.p 


where the formula (p in pp.p and vp.p must be positive in the variable p. The 
new operators [V] and [3] are the global universal and existential modalities, 
with their standard semantics: (S,m) N [V]:p if (S,-!;) N gr for all v G S, and 
(§, u) N [3]ip if (S, v) \= if for some v G S. 

Given an Ad*-model §, let Sx be the underlying A^-model. Conversely, 
given an Af-model S = {S,a,V), define the Ad*-model = {S,a^,V) by 
setting cr®(s) = (a’(s), S). The main result of this section is the following. 

Theorem 7. A formula in MMSO is invariant for global neighborhood bisimula¬ 
tions if, and only if it is equivalent to a formula of the logic pMMLg. 

Proof. Clearly pMMLg translates into MMSO and is invariant for global bisimula¬ 
tions. 

Conversely, suppose (p G MMSO is invariant for global neighborhood bisimu¬ 
lations. First observe that (p can be regarded as a formula in MSO^vi* as well. 
More precisely, there is a formula (p* G MSO^vi* such that 


(T,t) N ip* iff (T7K,f) 1= (p 


(5) 


for any Af*-model (T, t). By Corollary [T] there is a second-order {n,^}- 
automaton Ag, such that 


= ip* (on all Af*-tree models). 


( 6 ) 
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Now we use the existence of an adequate, uniform construction for A4* 
(Proposition [ill). Let be the corresponding modal A-automaton given by 
Proposition [51 where A is the collection of all monotone, natural predicate 
liftings for A4*. By Proposition |T5] we may in fact assume that is a 0- 
automaton, where 0 = {D,(),E,E‘^}. Let ip = ip/^t be the corresponding 
formula in /iML 0 . We claim that, for any pointed neighborhood model (§, s) we 
have 

S, s N (/? iff s 1= V”- (7) 

To prove this, consider the Ad*-tree model (T, R, r) given by Proposition [51 
applied to the pointed Ad*-model Then there is a surjective M.*- 

coalgebra morphism / : (T, r) —>■ s), and so in particular, / is the graph of a 

global neighborhood bisimulation between Tm and S relating r to s. Gathering 
some facts we obtain the following chain of equivalences: 


S, s 1= iff T_M,r \= (fi 
iff T,r N ip* 
iff T, i?, r N A, 
iff §*^,5 1 = A^ 

iff , s 1 = V' 


(assumption on ip) 

(Proposition [5]) 
(assumption on ip) 


which proves 0 indeed. 

Finally, let ip'^ G pMMLg be the formula we obtain from ip by replacing every 
occurrence of E with [3] and every occurrence of E‘^ with [V]. It is a routine 
check to verify that 

s 1= iff S, s 1= ip"^. ( 8 ) 

But then the equivalence oi p G MMSO and ip'^ G is immediate from 0 

and dH). □ 
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